tree 9942675127596e8ad9fc1f96f2be327007af4250
parent fe71f1d4a5cb07175a69dba53dd92ab7cd60a541
author David Benjamin <davidben@chromium.org> 1441082003 -0400
committer Adam Langley <agl@google.com> 1441134748 +0000

BN_mod_exp_mont_consttime: check for zero modulus.

Don't dereference |d| when |top| is zero. Also test that various BIGNUM
methods behave correctly on zero/even inputs.

(Imported from upstream's cf633fa00244e39eea2f2c0b623f7d5bbefa904e.)

We already had the BN_div and BN_MONT_CTX_set tests, but align them with
upstream's for consistency.

Change-Id: Ice5d04f559b4d5672e23c400637c07d8ee401727
Reviewed-on: https://boringssl-review.googlesource.com/5783
Reviewed-by: Adam Langley <agl@google.com>